CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...

Immunity Canvas: WPTOUCH_NONCE

Name| wptouchnonce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WPTouch Nonce Notes| CVE Name: CWE-434 VENDOR: BraveNewCode Changelog: https://wordpress.org/plugins/wptouch/changelog/ Notes: Vulnerable versions are 3.x = 3.4.2 This is a post authentication shell upload vulnerability in ...

Immunity Canvas: WPEASYCART_RCE

Name| wpeasycartrce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WP-EasyCart Shell Upload Notes| CVE Name: CWE-434 VENDOR: http://www.wpeasycart.com/ Changelog: https://wordpress.org/plugins/wp-easycart/changelog/ Notes: Vulnerable versions are = 3.0.4 We assume that...

Immunity Canvas: WPSYMPOSIUM_RCE

Name| wpsymposiumrce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WP-Symposium RCE Notes| CVE Name: CWE-434 VENDOR: www.wpsymposium.com Notes: WP-Symposium is a social networking plugin for WordPress with 150k downloads as of 12/12/2014. This is an exceptionally straight forward shell...